[Sargerras]

Рello,

Some more of cryptolocker copycats

[Artilllerie]

Thx Sargerras.

A screen about this sample using the easy way for deleting shadow copy snapshots :

[SimonZerafa]

Hi,

Any signs that this malware might be able to work around a SRP to prevent VSSADMIN from running? e.g running as SYSTEM or similar?

Kind Regards

Simon